[Asterisk-code-review] res_ari_channels: Fixed endpoint 80 characters limit (asterisk[master])

[sungtae kim]

sungtae kim has posted comments on this change. ( https://gerrit.asterisk.org/c/asterisk/+/14279 )

Change subject: res_ari_channels: Fixed endpoint 80 characters limit
......................................................................


Patch Set 2:

(1 comment)

Hi Richard, Sean,
Thank you for your replying. I've added comment. Could you please take a look again?

Thanks. 😊

https://gerrit.asterisk.org/c/asterisk/+/14279/1/res/ari/resource_channels.c 
File res/ari/resource_channels.c:

https://gerrit.asterisk.org/c/asterisk/+/14279/1/res/ari/resource_channels.c@1119 
PS1, Line 1119: 		dialdevice = ast_strdupa(stuff);
> > Since there is no fixed limit, is it now possible for an attacker to try to remotely blow the stac […]
Actually, there's limit already. Asterisk has the max HTTP request payload size which is 40k.

It is already big, but not unlimited.



-- 
To view, visit https://gerrit.asterisk.org/c/asterisk/+/14279
To unsubscribe, or for help writing mail filters, visit https://gerrit.asterisk.org/settings

Gerrit-Project: asterisk
Gerrit-Branch: master
Gerrit-Change-Id: I91b5f6708a1200363f3267b847dd6a0915222c25
Gerrit-Change-Number: 14279
Gerrit-PatchSet: 2
Gerrit-Owner: sungtae kim <pchero21 at gmail.com>
Gerrit-Reviewer: Friendly Automation
Gerrit-Reviewer: Richard Mudgett <rmudgett at digium.com>
Gerrit-CC: Sean Bright <sean.bright at gmail.com>
Gerrit-Comment-Date: Tue, 21 Apr 2020 20:15:24 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: Sean Bright <sean.bright at gmail.com>
Comment-In-Reply-To: Richard Mudgett <rmudgett at digium.com>
Gerrit-MessageType: comment
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-code-review/attachments/20200421/571f8b39/attachment.html>